Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jkFSbXWxbwGUWbag7dIshVaVhm8.roa
File: jkFSbXWxbwGUWbag7dIshVaVhm8.roa (raw, json)
Hash identifier: bsI40z+zdXwKx6MAJ6hxBPKl53fjGj9Wjk0halmlSqA=
Subject key identifier: 8E:41:52:6D:75:B1:6F:01:94:59:B6:A0:ED:D2:2C:85:56:95:86:6F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274856E2289BB7AE1B7731AC1FEFAA07
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jkFSbXWxbwGUWbag7dIshVaVhm8.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273171
IP address blocks: 201.77.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:56:e2:28:9b:b7:ae:1b:77:31:ac:1f:ef:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e41526d75b16f019459b6a0edd22c855695866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:89:24:01:37:51:6c:c0:7b:12:74:f7:16:
e4:ba:f1:6d:1e:b1:3f:b0:eb:8c:1e:d9:02:32:6c:
d7:a4:73:fe:26:93:cc:84:64:82:08:06:fe:4c:36:
cb:b0:ad:ed:3c:68:96:4e:c0:aa:55:3a:04:64:72:
2a:77:4c:33:96:58:c6:13:c8:c3:22:29:6a:89:8d:
2c:d9:29:0b:ac:19:e3:28:42:19:e8:bb:9c:7e:37:
d4:30:cf:f4:85:c9:7a:e5:00:98:72:5e:b0:6b:58:
9d:b0:92:9b:15:4a:58:80:2d:69:ad:68:37:3d:ff:
e5:8a:e6:c9:b7:98:e5:dd:07:59:a4:74:2e:35:87:
b3:14:a0:39:db:30:cf:6e:2d:09:89:25:e2:e8:ed:
3d:17:dd:7d:05:d6:92:cc:98:fe:4a:58:6a:c3:36:
27:0c:5a:ea:62:97:84:c4:9e:39:52:3a:34:7f:38:
19:4a:73:2c:8c:4b:42:d6:43:ac:2e:4e:46:39:27:
59:a4:b0:57:f2:71:84:52:35:0e:ed:3b:99:83:cf:
16:ca:08:a3:9c:19:7e:f2:be:0c:c7:d2:08:a8:e4:
f4:42:78:50:8e:40:62:11:d7:11:11:46:09:0b:43:
42:96:d7:9a:a4:50:39:71:b5:f5:19:be:13:95:65:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:52:6D:75:B1:6F:01:94:59:B6:A0:ED:D2:2C:85:56:95:86:6F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/jkFSbXWxbwGUWbag7dIshVaVhm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.63.0/24
Signature Algorithm: sha256WithRSAEncryption
85:38:0c:82:c2:ae:44:8a:a8:d0:83:73:53:ab:0b:87:29:c9:
17:c6:30:99:21:b1:10:2c:50:93:f9:9b:8e:f4:cf:85:24:4c:
02:d1:24:63:26:42:d2:39:ad:08:13:71:43:b5:15:61:9a:68:
35:bc:a3:b9:3a:ce:97:a4:82:14:24:45:ba:76:4a:b9:26:48:
42:32:a0:3a:e8:8a:b6:76:cf:c1:f8:49:0b:df:65:e4:4d:6d:
e9:e5:32:2b:63:04:91:5b:bc:44:b2:c2:df:46:08:e6:fb:f0:
86:98:75:bd:77:33:ae:70:ba:a9:c4:57:55:95:aa:74:0e:94:
b0:a7:2b:1c:b3:be:a2:9e:79:b6:68:16:70:58:6e:4b:4b:71:
0d:5b:b2:2e:f6:48:78:6a:38:9a:7f:58:38:00:b4:34:08:e6:
4c:0c:d2:12:f2:a9:0a:c8:05:08:04:c0:c5:d0:a9:a3:9f:22:
33:01:e0:23:22:5d:11:91:c6:d0:10:b7:b1:cd:1b:f9:f4:05:
f4:4d:36:cf:16:31:f3:26:0d:bf:22:43:f7:1a:03:fc:ba:a7:
a6:ed:66:96:9c:5c:06:e3:a2:b3:bd:51:d2:99:59:9f:57:50:
dd:d0:0e:54:fb:ed:e5:65:d3:9d:49:80:e5:2a:4e:be:49:91:
0a:ed:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:43 2025 by rpki-client